Amendments to the Claims 



Kindly amend claims 1, 8, 1 1, 12, 21, 28, 30, 31, 33, 41, 48, 51 & 52, and cancel claims 
2, 3, 9, 10, 22, 23, 29, 32, 42, 43, 49 & 50 (without prejudice) as set forth below. All pending 
claims are reproduced below, with changes in the amended claims shown by underlining (for 
added matter) and strikethrough/double brackets (for deleted matter). 

1 . (Currently Amended) A method of implementing a data access control facility, 
said method comprising: 

assigning personally identifying information (PII) classification labels to 
PII data objects, wherein a PII data object has one PII classification label assigned 
thereto; 

defining at least one PII purpose serving function set (PSFS) comprising a 
list of application functions that read or write PII data objects; [[and]] 

assigning a PII classification label to each PSFS, wherein a PII data object 
is only read accessible via an application function of a PII PSFS having a PII 
classification label that is equal to or a proper subset of the PII classification label 
of the PII data object; 

wherein a PII data object is write accessible by an application function of 
a PII PSFS having a PII classification label that is equal to or dominant of the PII 
classification label of the PII data object; and 

wherein the PII data object may be write accessible by an application 
function of a PII PSFS having a list of PII reclassifications which are allowed to 
that PII PSFS . 

2. (Canceled). 

3. (Canceled). 
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4. (Original) The method of claim 1 , further comprising identifying a user invoking 
a particular function of the data access control facility, and assigning a PII clearance set to the 
identified user, wherein the PII clearance set comprises a list of one or more PII classification 
labels for the identified user. 

5. (Original) The method of claim 1, wherein the PII classification label assigned to 
the PII data object includes an identification of an owner of the PII data object. 

6. (Original) The method of claim 1, wherein the PII classification label assigned to 
the PII data object includes an indication of at least one purpose for which the data object may be 
used. 

7. (Original) The method of claim 1, further comprising initially defining PII 
purposes within an enterprise to use the data access control facility, and employing the PII 
purposes in defining the PII classification labels assigned to the PII data objects and assigned to 
the at least one PSFS. 

8. (Currently Amended) A data access control method comprising: 

(i) invoking, by a user of a data access control facility, a particular 
function, said data access control facility having personally identifying 
information (PII) classification labels assigned to PII data objects and at least one 
PII purpose serving function set (PSFS) including a list of application functions 
that read, write or reclassify PII data objects, and having a PII classification label 
assigned thereto, and wherein the user of the data access control facility has 
assigned thereto a PII clearance set, the PII clearance set for the user comprising a 
list containing at least one PII classification label; 

(ii) determining whether the particular function is defined to a PII PSFS 
of the at least one PII PSFS of the data access control facility, and if so, 
determining whether the user's PII clearance set includes a PII classification label 
matching the PII classification label assigned to that PII PSFS, and if so, allowing 
access to the particular function; [[and]] 
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(iii) determining whether the user is permitted access to a selected data 
object to perform the particular function; 

further comprising, prior to said invoking, establishing a process within an 
operating system under security control of the data access control facility, and 
wherein said invoking occurs within said established process; and 

wherein said determining (ii) further comprises denying access to the 
particular function if the particular function is not defined to a PH PSFS of the 
data access control facility, and a current process label ("CPL) has been previously 
set for the established process . 

9. (Canceled). 

10. (Canceled). 

11. (Currently Amended) The data access control method of claim [[9]] 8, wherein 
said determining (iii) comprises determining whether the selected data object comprises a PII 
data object, and if so, verifying that the user's particular function is defined to a PII PSFS of the 
at least one PII PSFS of the data access control facility, and if not, denying access to the selected 
data object. 

12. (Currently Amended) The data access control method of claim [[9]] 8, wherein 
said determining (iii) further comprises determining whether a current process label (CPL) has 
been set for the established process if the selected data object is other than a PII data object, and 
if not, rendering an access decision to the selected data object via discretionary access control 
checking. 

13. (Original) The data access control method of claim 12, wherein said determining 
(iii) further comprises determining whether the particular function is a read operation if the CPL 
has been previously set for the process and the selected data object is other than a PII data object, 
and if so, then rendering an access decision to the selected data object via discretionary access 
control checking, and if the particular function is other than a read operation, denying access to 
the selected data object from the established process. 
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14. (Original) The data access control method of claim 1 1 , wherein said determining 
(iii) further comprises determining whether the particular function comprises a read operation, 
and if so, determining whether the PII classification label assigned to the PII PSFS to which the 
particular function is defined is equal to or a proper subset of a PII classification label associated 
with the selected data object, and if not, denying access to the selected data object, and if so, 
adding the PII classification label of the selected data object to a current process label (CPL) list 
for the established process. 

15. (Original) The data access control method of claim 1 1 , wherein said 
determining (iii) further comprises determining that the particular function is other than a read 
operation, and when so, determining whether a current process label (CPL) list for the 
established process exists, and if not, allowing an access decision to the selected data object to 
proceed via discretionary access control checking. 

1 6. (Original) The data access control method of claim 1 5, wherein if the CPL list for 
the established process exists, determining whether the PII classification label of the selected 
data object is equal to or a proper subset of each of the CPL entries, and if so, allowing an access 
decision to the selected data object to proceed via discretionary access control checking. 

1 7. (Original) The data access control method of claim 1 6, wherein if the PII 
classification of the PII data object is not equal to or a proper subset of the PII classification label 
of each CPL list entry, then the method further comprises determining whether the PII PSFS to 
which the particular function is defined allows reclassification from the PII classification label(s) 
in the CPL list to the PII classification label of the PII data object, and if so, allowing an access 
decision to the selected data object to proceed via discretionary access control checking, 
otherwise, denying the user access to the PII data object. 

1 8. (Original) The data access control method of claim 1 1 , further comprising 
providing a current process label (CPL) list for the established process, the CPL list comprising a 
dynamic list of the PII classification labels of each PII data object read within the established 
process. 
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19. (Original) The data access control method of claim 18, further comprising 
employing the CPL list when determining whether to allow the user of the established process to 
access another PII data object when the particular function is a write operation to the another PII 
data object, wherein the another PII data object may have a different PII classification label than 
the PII classification label associated with the PII data object from which the information was 
read, thereby reclassifying the information that was read. 

20. (Original) The data access control method of claim 19, further comprising 
providing a "reclassification allowed" parameter associated with the at least one PII PSFS, 
wherein if the "reclassification allowed" parameter is set, the parameter is associated with all 
functions defined within the corresponding at least one PII PSFS, and the parameter allows the 
user executing one of these functions to reclassify a PII data object when writing information 
into the PII data object that has a PII classification label that is not identical to or a proper subset 
of each of the PII classification labels contained in the CPL list. 

21 . (Currently Amended) A system for implementing a data access control facility, 
said system comprising: 

means for assigning personally identifying information (PII) classification 
labels to PII data objects, wherein a PII data object has one PII classification label 
assigned thereto; 

means for defining at least one PII purpose serving function set (PSFS) 
comprising a list of application functions that read or write PII data objects; 
[[and]] 

means for assigning a PII classification label to each PSFS, wherein a PII 
data object is only read accessible via an application function of a PII PSFS 
having a PII classification label that is equal to or a proper subset of the PII 
classification label of the PII data object; 

wherein a PII data object is write accessible by an application function of 
a PII PSFS having a PII classification label that is equal to or dominant of the PII 
classification label of the PII data object; and 
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wherein the PII data object may be write accessible by an application 



function of a PH PSFS having a list of PII reclassifications which are allowed to 



that PII PSFS . 



22. (Canceled). 

23. (Canceled). 

24. (Original) The system of claim 21, further comprising means for identifying a 
user invoking a particular function of the data access control facility, and for assigning a PII 
clearance set to the identified user, wherein the PII clearance set comprises a list of one or more 
PII classification labels for the identified user. 

25. (Original) The system of claim 21, wherein the PII classification label assigned to 
the PII data object includes an identification of an owner of the PII data object. 

26. (Original) The system of claim 2 1 , wherein the PII classification label assigned to 
the PII data object includes an indication of at least one purpose for which the data object may be 
used. 

27. (Original) The system of claim 21, further comprising initially defining PII 
purposes within an enterprise to use the data access control facility, and employing the PII 
purposes in defining the PII classification labels assigned to the PII data objects and assigned to 
the at least one PSFS. 

28. (Currently Amended) A data access control facility comprising: 

(i) means for invoking, by a user of a data access control facility, a 
particular function, said data access control facility having personally identifying 
information (PII) classification labels assigned to PII data objects and at least one 
PII purpose serving function set (PSFS) including a list of application functions 
that read, write or reclassify PII data objects, and having a PII classification label 
assigned thereto, and wherein the user of the data access control facility has 
assigned thereto a PII clearance set, the PII clearance set for the user comprising a 
list containing at least one PII classification label; 



POU920030020US1 



-7- 



(ii) means for determining whether the particular function is defined to a 
PII PSFS of the at least one PII PSFS of the data access control facility, and if so, 
determining whether the user's PII clearance set includes a PII classification label 
matching the PII classification label assigned to that PII PSFS, and if so, allowing 
access to the particular function; [[and]] 

(iii) means for determining whether the user is permitted access to a 
selected data object to perform the particular function; 

further comprising, prior to said invoking, means for establishing a 
process within an operating system under security control of the data access 
control facility, and wherein said invoking occurs within said established process; 
and 

wherein said means for determining (iii) further comprises means for 
determining whether a current process label (CPL) has been set for the established 
process if the selected data object is other than a PII data object, and if not, for 
rendering an access decision to the selected data object via discretionary access 
control checking . 

29. (Canceled). 

30. (Currently Amended) The data access control facility of claim [[29]] 28, wherein 
said means for determining (ii) further comprises means for denying access to the particular 
function if the particular function is not defined to a PII PSFS of the data access control facility, 
and a current process label (CPL) has been previously set for the established process. 

3 1 . (Currently Amended) The data access control facility of claim [[29]] 28, wherein 
said means for determining (iii) comprises means for determining whether the selected data 
object comprises a PII data object, and if so, for verifying that the user's particular function is 
defined to a PII PSFS of the at least one PII PSFS of the data access control facility, and if not, 
for denying access to the selected data object. 

32. (Canceled). 
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33. (Currently Amended) The data access control facility of claim [[32]] 28, wherein 
said means for determining (iii) further comprises means for determining whether the particular 
function is a read operation if the CPL has been previously set for the process and the selected 
data object is other than a PII data object, and if so, then for rendering an access decision to the 
selected data object via discretionary access control checking, and if the particular function is 
other than a read operation, for denying access to the selected data object from the established 
process. 

34. (Original) The data access control facility of claim 3 1 , wherein said means for 
determining (iii) further comprises means for determining whether the particular function 
comprises a read operation, and if so, for determining whether the PII classification label 
assigned to the PII PSFS to which the particular function is defined is equal to or a proper subset 
of a PII classification label associated with the selected data object, and if not, for denying access 
to the selected data object, and if so, for adding the PII classification label of the selected data 
object to a current process label (CPL) list for the established process. 

35. (Original) The data access control facility of claim 3 1 , wherein said means for 
determining (iii) further comprises means for determining that the particular function is other 
than a read operation, and when so, for determining whether a current process label (CPL) list for 
the established process exists, and if not, for allowing an access decision to the selected data 
object to proceed via discretionary access control checking. 

36. (Original) The data access control facility of claim 35 wherein if the CPL list for 
the established process exists, means for determining whether the PII classification label of the 
selected data object is equal to or a proper subset of each of the CPL entries, and if so, for 
allowing an access decision to the selected data object to proceed via discretionary access control 
checking. 

37. (Original) The data access control facility of claim 36, wherein if the PII 
classification of the PII data object is not equal to or a proper subset of the PII classification label 
of each CPL list entry, then the facility further comprises means for determining whether the PII 
PSFS to which the particular function is defined allows reclassification from the PII 
classification label(s) in the CPL list to the PII classification label of the PII data object, and if 
so, for allowing an access decision to the selected data object to proceed via discretionary access 
control checking, otherwise, for denying the user access to the PII data object. 
POU920030020US1 -9- 



38. (Original) The data access control facility of claim 3 1 , further comprising means 
for providing a current process label (CPL) list for the established process, the CPL list 
comprising a dynamic list of the PII classification labels of each PII data object read within the 
established process. 

39. (Original) The data access control facility of claim 38, further comprising means 
for employing the CPL list when determining whether to allow the user of the established 
process to access another PII data object when the particular function is a write operation to the 
another PII data object, wherein the another PII data object may have a different PII 
classification label than the PII classification label associated with the PII data object from which 
the information was read, thereby reclassifying the information that was read. 

40. (Original) The data access control facility of claim 39, further comprising means 
for providing a "reclassification allowed" parameter associated with the at least one PII PSFS, 
wherein if the "reclassification allowed" parameter is set, the parameter is associated with all 
functions defined within the corresponding at least one PII PSFS, and the parameter allows the 
user executing one of these functions to reclassify a PII data object when writing information 
into the PII data object that has a PII classification label that is not identical to or a proper subset 
of each of the PII classification labels contained in the CPL list. 

41 . (Currently Amended) At least one program storage device readable by a 
machine, embodying at least one program of instructions executable by the machine to perform a 
method of implementing a data access control facility, said method comprising: 

assigning personally identifying information (PII) classification labels to 
PII data objects, wherein a PII data object has one PII classification label assigned 
thereto; 

defining at least one PII purpose serving function set (PSFS) comprising a 
list of application functions that read or write PII data objects; [[and]] 

assigning a PII classification label to each PSFS, wherein a PII data object 
is only read accessible via an application function of a PII PSFS having a PII 
classification label that is equal to or a proper subset of the PII classification label 
of the PII data object; 
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wherein a PII data object is write accessible by an application function of 
a PII PSFS having a PII classification label that is equal to or dominant of the PII 
classification label of the PII data object: and 

wherein the PII data object may be write accessible by an application 
function of a PII PSFS having a list of PII reclassifications which are allowed to 
that PII PSFS . 

42. (Canceled). 

43. (Canceled). 

44. (Original) The at least one program storage device of claim 41 , further 
comprising identifying a user invoking a particular function of the data access control facility, 
and assigning a PII clearance set to the identified user, wherein the PII clearance set comprises a 
list of one or more PII classification labels for the identified user. 

45. (Original) The at least one program storage device of claim 41, wherein the PII 
classification label assigned to the PII data object includes an identification of an owner of the 
PII data object. 

46. (Original) The at least one program storage device of claim 41 , wherein the PII 
classification label assigned to the PII data object includes an indication of at least one purpose 
for which the data object may be used. 

47. (Original) The at least one program storage device of claim 41 , further 
comprising initially defining PII purposes within an enterprise to use the data access control 
facility, and employing the PII purposes in defining the PII classification labels assigned to the 
PII data objects and assigned to the at least one PSFS. 
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48. (Currently Amended) At least one program storage device readable by a 
machine, embodying at least one program of instructions executable by the machine to perform a 
method for controlling data access, said method comprising: 

(i) invoking, by a user of a data access control facility, a particular 
function, said data access control facility having personally identifying 
information (PII) classification labels assigned to PII data objects and at least one 
PII purpose serving function set (PSFS) including a list of application functions 
that read, write or reclassify PII data objects, and having a PII classification label 
assigned thereto, and wherein the user of the data access control facility has 
assigned thereto a PII clearance set, the PII clearance set for the user comprising a 
list containing at least one PII classification label; 

(ii) determining whether the particular function is defined to a PII PSFS 
of the at least one PII PSFS of the data access control facility, and if so, 
determining whether the user's PII clearance set includes a PII classification label 
matching the PII classification label assigned to that PII PSFS, and if so, allowing 
access to the particular function; [[and]] 

(iii) determining whether the user is permitted access to a selected data 
object to perform the particular function; 

further comprising, prior to said invoking, establishing a process within an 
operating system under security control of the data access control facility, and 
wherein said invoking occurs within said established process; and 

wherein said determining (ii) further comprises denying access to the 
particular function if the particular function is not defined to a PII PSFS of the 
data access control facility, and a current process label (CPL) has been previously 
set for the established process . 

49. (Canceled). 

50. (Canceled). 
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5 1 . (Currently Amended) The at least one program storage device of claim [[49]] 48, 
wherein said determining (iii) comprises determining whether the selected data object comprises 
a PII data object, and if so, verifying that the user's particular function is defined to a PII PSFS 
of the at least one PII PSFS of the data access control facility, and if not, denying access to the 
selected data object. 

52. (Currently Amended) The at least one program storage device of claim [[49]] 48, 
wherein said determining (iii) further comprises determining whether a current process label 
(CPL) has been set for the established process if the selected data object is other than a PII data 
object, and if not, rendering an access decision to the selected data object via discretionary 
access control checking. 

53. (Original) The at least one program storage device of claim 52, wherein said 
determining (iii) further comprises determining whether the particular function is a read 
operation if the CPL has been previously set for the process and the selected data object is other 
than a PII data object, and if so, then rendering an access decision to the selected data object via 
discretionary access control checking, and if the particular function is other than a read 
operation, denying access to the selected data object from the established process. 

54. (Original) The at least one program storage device of claim 5 1 , wherein said 
determining (iii) further comprises determining whether the particular function comprises a read 
operation, and if so, determining whether the PII classification label assigned to the PII PSFS to 
which the particular function is defined is equal to or a proper subset of a PII classification label 
associated with the selected data object, and if not, denying access to the selected data object, 
and if so, adding the PII classification label of the selected data object to a current process label 
(CPL) list for the established process. 

55. (Original) The at least one program storage device of claim 5 1 , wherein said 
determining (iii) further comprises determining that the particular function is other than a read 
operation, and when so, determining whether a current process label (CPL) list for the 
established process exists, and if not, allowing an access decision to the selected data object to 
proceed via discretionary access control checking. 
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56. (Original) The at least one program storage device of claim 55, wherein if the 
CPL list for the established process exists, determining whether the PII classification label of the 
selected data object is equal to or a proper subset of each of the CPL entries, and if so, allowing 
an access decision to the selected data object to proceed via discretionary access control 
checking. 

57. (Original) The at least one program storage device of claim 56, wherein if the PII 
classification of the PII data object is not equal to or a proper subset of the PII classification label 
of each CPL list entry, then the method further comprises determining whether the PII PSFS to 
which the particular function is defined allows reclassification from the PII classification label(s) 
in the CPL list to the PII classification label of the PII data object, and if so, allowing an access 
decision to the selected data object to proceed via discretionary access control checking, 
otherwise, denying the user access to the PII data object. 

58. (Original) The at least one program storage device of claim 5 1 , further 
comprising providing a current process label (CPL) list for the established process, the CPL list 
comprising a dynamic list of the PII classification labels of each PII data object read within the 
established process. 

59. (Original) The at least one program storage device of claim 58, further 
comprising employing the CPL list when determining whether to allow the user of the 
established process to access another PII data object when the particular function is a write 
operation to the another PII data object, wherein the another PII data object may have a different 
PII classification label than the PII classification label associated with the PII data object from 
which the information was read, thereby reclassifying the information that was read. 

60. (Original) The at least one program storage device of claim 59, further 
comprising providing a "reclassification allowed" parameter associated with the at least one PII 
PSFS, wherein if the "reclassification allowed" parameter is set, the parameter is associated with 
all functions defined within the corresponding at least one PII PSFS, and the parameter allows 
the user executing one of these functions to reclassify a PII data object when writing information 
into the PII data object that has a PII classification label that is not identical to or a proper subset 
of each of the PII classification labels contained in the CPL list. 
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